Minki/linux
1
0
Fork 1
mirror of https://github.com/torvalds/linux.git synced 2024-11-26 14:12:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

netfilter: nf_hook_ops structs can be const

Browse Source 
We no longer place these on a list so they can be const.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
Florian Westphal 2017-07-26 11:40:52 +02:00 committed by Pablo Neira Ayuso
parent 5da773a3e8
commit 591bb2789b
18 changed files with 18 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/net/ipvlan/ipvlan_main.c
View File

@ -15,7 +15,7 @@ struct ipvlan_netns {
unsigned int ipvl_nf_hook_refcnt; unsigned int ipvl_nf_hook_refcnt;
}; };
static struct nf_hook_ops ipvl_nfops[] __read_mostly = { static const struct nf_hook_ops ipvl_nfops[] = {
{ {
.hook = ipvlan_nf_input, .hook = ipvlan_nf_input,
.pf = NFPROTO_IPV4, .pf = NFPROTO_IPV4,

2
net/bridge/br_netfilter_hooks.c
View File

@ -887,7 +887,7 @@ EXPORT_SYMBOL_GPL(br_netfilter_enable);
/* For br_nf_post_routing, we need (prio = NF_BR_PRI_LAST), because /* For br_nf_post_routing, we need (prio = NF_BR_PRI_LAST), because
* br_dev_queue_push_xmit is called afterwards */ * br_dev_queue_push_xmit is called afterwards */
static struct nf_hook_ops br_nf_ops[] __read_mostly = { static const struct nf_hook_ops br_nf_ops[] = {
{ {
.hook = br_nf_pre_routing, .hook = br_nf_pre_routing,
.pf = NFPROTO_BRIDGE, .pf = NFPROTO_BRIDGE,

2
net/bridge/netfilter/ebtable_filter.c
View File

@ -70,7 +70,7 @@ ebt_out_hook(void *priv, struct sk_buff *skb,
return ebt_do_table(skb, state, state->net->xt.frame_filter); return ebt_do_table(skb, state, state->net->xt.frame_filter);
} }
static struct nf_hook_ops ebt_ops_filter[] __read_mostly = { static const struct nf_hook_ops ebt_ops_filter[] = {
{ {
.hook = ebt_in_hook, .hook = ebt_in_hook,
.pf = NFPROTO_BRIDGE, .pf = NFPROTO_BRIDGE,

2
net/bridge/netfilter/ebtable_nat.c
View File

@ -70,7 +70,7 @@ ebt_nat_out(void *priv, struct sk_buff *skb,
return ebt_do_table(skb, state, state->net->xt.frame_nat); return ebt_do_table(skb, state, state->net->xt.frame_nat);
} }
static struct nf_hook_ops ebt_ops_nat[] __read_mostly = { static const struct nf_hook_ops ebt_ops_nat[] = {
{ {
.hook = ebt_nat_out, .hook = ebt_nat_out,
.pf = NFPROTO_BRIDGE, .pf = NFPROTO_BRIDGE,

2
net/decnet/netfilter/dn_rtmsg.c
View File

@ -115,7 +115,7 @@ static inline void dnrmg_receive_user_skb(struct sk_buff *skb)
RCV_SKB_FAIL(-EINVAL); RCV_SKB_FAIL(-EINVAL);
} }
static struct nf_hook_ops dnrmg_ops __read_mostly = { static const struct nf_hook_ops dnrmg_ops = {
.hook = dnrmg_hook, .hook = dnrmg_hook,
.pf = NFPROTO_DECNET, .pf = NFPROTO_DECNET,
.hooknum = NF_DN_ROUTE, .hooknum = NF_DN_ROUTE,

2
net/ipv4/netfilter/ipt_CLUSTERIP.c
View File

@ -624,7 +624,7 @@ arp_mangle(void *priv,
return NF_ACCEPT; return NF_ACCEPT;
} }
static struct nf_hook_ops cip_arp_ops __read_mostly = { static const struct nf_hook_ops cip_arp_ops = {
.hook = arp_mangle, .hook = arp_mangle,
.pf = NFPROTO_ARP, .pf = NFPROTO_ARP,
.hooknum = NF_ARP_OUT, .hooknum = NF_ARP_OUT,

2
net/ipv4/netfilter/ipt_SYNPROXY.c
View File

@ -416,7 +416,7 @@ static unsigned int ipv4_synproxy_hook(void *priv,
return NF_ACCEPT; return NF_ACCEPT;
} }
static struct nf_hook_ops ipv4_synproxy_ops[] __read_mostly = { static const struct nf_hook_ops ipv4_synproxy_ops[] = {
{ {
.hook = ipv4_synproxy_hook, .hook = ipv4_synproxy_hook,
.pf = NFPROTO_IPV4, .pf = NFPROTO_IPV4,

2
net/ipv4/netfilter/iptable_nat.c
View File

@ -67,7 +67,7 @@ static unsigned int iptable_nat_ipv4_local_fn(void *priv,
return nf_nat_ipv4_local_fn(priv, skb, state, iptable_nat_do_chain); return nf_nat_ipv4_local_fn(priv, skb, state, iptable_nat_do_chain);
} }
static struct nf_hook_ops nf_nat_ipv4_ops[] __read_mostly = { static const struct nf_hook_ops nf_nat_ipv4_ops[] = {
/* Before packet filtering, change destination */ /* Before packet filtering, change destination */
{ {
.hook = iptable_nat_ipv4_in, .hook = iptable_nat_ipv4_in,

2
net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c
View File

@ -174,7 +174,7 @@ static unsigned int ipv4_conntrack_local(void *priv,
/* Connection tracking may drop packets, but never alters them, so /* Connection tracking may drop packets, but never alters them, so
make it the first hook. */ make it the first hook. */
static struct nf_hook_ops ipv4_conntrack_ops[] __read_mostly = { static const struct nf_hook_ops ipv4_conntrack_ops[] = {
{ {
.hook = ipv4_conntrack_in, .hook = ipv4_conntrack_in,
.pf = NFPROTO_IPV4, .pf = NFPROTO_IPV4,

2
net/ipv4/netfilter/nf_defrag_ipv4.c
View File

@ -90,7 +90,7 @@ static unsigned int ipv4_conntrack_defrag(void *priv,
return NF_ACCEPT; return NF_ACCEPT;
} }
static struct nf_hook_ops ipv4_defrag_ops[] = { static const struct nf_hook_ops ipv4_defrag_ops[] = {
{ {
.hook = ipv4_conntrack_defrag, .hook = ipv4_conntrack_defrag,
.pf = NFPROTO_IPV4, .pf = NFPROTO_IPV4,

2
net/ipv6/ila/ila_xlat.c
View File

@ -208,7 +208,7 @@ ila_nf_input(void *priv,
return NF_ACCEPT; return NF_ACCEPT;
} }
static struct nf_hook_ops ila_nf_hook_ops[] __read_mostly = { static const struct nf_hook_ops ila_nf_hook_ops[] = {
{ {
.hook = ila_nf_input, .hook = ila_nf_input,
.pf = NFPROTO_IPV6, .pf = NFPROTO_IPV6,

2
net/ipv6/netfilter/ip6t_SYNPROXY.c
View File

@ -438,7 +438,7 @@ static unsigned int ipv6_synproxy_hook(void *priv,
return NF_ACCEPT; return NF_ACCEPT;
} }
static struct nf_hook_ops ipv6_synproxy_ops[] __read_mostly = { static const struct nf_hook_ops ipv6_synproxy_ops[] = {
{ {
.hook = ipv6_synproxy_hook, .hook = ipv6_synproxy_hook,
.pf = NFPROTO_IPV6, .pf = NFPROTO_IPV6,

2
net/ipv6/netfilter/ip6table_nat.c
View File

@ -69,7 +69,7 @@ static unsigned int ip6table_nat_local_fn(void *priv,
return nf_nat_ipv6_local_fn(priv, skb, state, ip6table_nat_do_chain); return nf_nat_ipv6_local_fn(priv, skb, state, ip6table_nat_do_chain);
} }
static struct nf_hook_ops nf_nat_ipv6_ops[] __read_mostly = { static const struct nf_hook_ops nf_nat_ipv6_ops[] = {
/* Before packet filtering, change destination */ /* Before packet filtering, change destination */
{ {
.hook = ip6table_nat_in, .hook = ip6table_nat_in,

2
net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c
View File

@ -191,7 +191,7 @@ static unsigned int ipv6_conntrack_local(void *priv,
return nf_conntrack_in(state->net, PF_INET6, state->hook, skb); return nf_conntrack_in(state->net, PF_INET6, state->hook, skb);
} }
static struct nf_hook_ops ipv6_conntrack_ops[] __read_mostly = { static const struct nf_hook_ops ipv6_conntrack_ops[] = {
{ {
.hook = ipv6_conntrack_in, .hook = ipv6_conntrack_in,
.pf = NFPROTO_IPV6, .pf = NFPROTO_IPV6,

2
net/ipv6/netfilter/nf_defrag_ipv6_hooks.c
View File

@ -74,7 +74,7 @@ static unsigned int ipv6_defrag(void *priv,
return err == 0 ? NF_ACCEPT : NF_DROP; return err == 0 ? NF_ACCEPT : NF_DROP;
} }
static struct nf_hook_ops ipv6_defrag_ops[] = { static const struct nf_hook_ops ipv6_defrag_ops[] = {
{ {
.hook = ipv6_defrag, .hook = ipv6_defrag,
.pf = NFPROTO_IPV6, .pf = NFPROTO_IPV6,

2
net/netfilter/ipvs/ip_vs_core.c
View File

@ -2101,7 +2101,7 @@ ip_vs_forward_icmp_v6(void *priv, struct sk_buff *skb,
#endif #endif
static struct nf_hook_ops ip_vs_ops[] __read_mostly = { static const struct nf_hook_ops ip_vs_ops[] = {
/* After packet filtering, change source only for VS/NAT */ /* After packet filtering, change source only for VS/NAT */
{ {
.hook = ip_vs_reply4, .hook = ip_vs_reply4,

2
security/selinux/hooks.c
View File

@ -6530,7 +6530,7 @@ security_initcall(selinux_init);
#if defined(CONFIG_NETFILTER) #if defined(CONFIG_NETFILTER)
static struct nf_hook_ops selinux_nf_ops[] = { static const struct nf_hook_ops selinux_nf_ops[] = {
{ {
.hook = selinux_ipv4_postroute, .hook = selinux_ipv4_postroute,
.pf = NFPROTO_IPV4, .pf = NFPROTO_IPV4,

2
security/smack/smack_netfilter.c
View File

@ -58,7 +58,7 @@ static unsigned int smack_ipv4_output(void *priv,
return NF_ACCEPT; return NF_ACCEPT;
} }
static struct nf_hook_ops smack_nf_ops[] = { static const struct nf_hook_ops smack_nf_ops[] = {
{ {
.hook = smack_ipv4_output, .hook = smack_ipv4_output,
.pf = NFPROTO_IPV4, .pf = NFPROTO_IPV4,